MAL-2025-48892 Malicious code in hackerone-app-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7989720a786925f09101ea3e9ebce9bf8190a57a6401b6e46125a75ad160bc66 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-0879

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-0879

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-0879 XSS in Shopside Software's Shopside App

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-0879

The CVE-2025-0879 entry describes an XSS vulnerability in Shopside App caused by improper neutralization of input during web page generation. Affected product: Shopside App (versions before 17.02.2025). Underlying cause: input is not properly sanitized before being embedded into generated pages, ...

CVE-2025-0879 XSS in Shopside Software's Shopside App

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-9216

creationtimestamp| type| source ---|---|--- 2025-09-17 09:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzjtze6bz2c...

CVE-2025-58116

creationtimestamp| type| source ---|---|--- 2025-09-17 07:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzbjr6x3x2c...

PT-2025-38109

Name of the Vulnerable Software and Affected Versions: OMRON SOCIAL SOLUTIONS Co., Ltd. UPS management application affected versions not specified Description: The Uninterruptible Power Supply UPS management application is susceptible to a flaw where executable file paths for Windows services are...

Shopside App 跨站脚本漏洞

Shopside App is a shopping application from the Turkish company Shopside. A cross-site scripting vulnerability exists in Shopside App versions prior to 17.02.2025, which stems from improper input neutralization during web page generation and could lead to cross-site scripting attacks...

PT-2025-38146

Name of the Vulnerable Software and Affected Versions: Shopside App versions prior to 17.02.2025 Description: Shopside App is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This issue requires high privileges. Recommendations:...

SUSE CVE-2025-10290

Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS...

CVE-2025-10572

creationtimestamp| type| source ---|---|--- 2025-09-16 21:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyya2urv7n2t...

CVE-2025-59160

creationtimestamp| type| source ---|---|--- 2025-09-16 17:46:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxuucspqo2x...

Malicious code in create-hest-app (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4f8a7c74b24a78d61a35d81d643117f524f843b425f34d281012f7ab8632868 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47303 Malicious code in create-hest-app (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4f8a7c74b24a78d61a35d81d643117f524f843b425f34d281012f7ab8632868 Any computer that has this package installed or running should be considered fully compromised. All...

CVE-2025-57145

A cross-site scripting XSS vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service [CVE-2025-5889]

Summary Node.js module brace-expansion is used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Node.js module...

CVE-2025-7355

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-7355 IDOR in Beefull Energy Technologies' Beefull App

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...